CVE & Exploit Intelligence Database

Updated 3h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

338,223 CVEs tracked 53,281 with exploits 4,731 exploited in wild 1,542 CISA KEV 3,929 Nuclei templates 37,826 vendors 42,573 researchers

1,099 results Clear all

CVE-2025-26624 1 Writeup EPSS 0.00

Rufus <4.6.2208 - Privilege Escalation

Rufus is a utility that helps format and create bootable USB flash drives. A DLL hijacking vulnerability in Rufus 4.6.2208 and earlier versions allows an attacker loading and executing a malicious DLL with escalated privileges (since the executable has been granted higher privileges during the time of launch) due to the ability to inject a malicious `cfgmgr32.dll` in the same directory as the executable and have it side load automatically. This is fixed in commit `74dfa49`, which will be part of version 4.7. Users are advised to upgrade as soon as version 4.7 becomes available. There are no known workarounds for this vulnerability.

CWE-427 Feb 18, 2025

CVE-2024-57964 7.3 HIGH EPSS 0.00

HVAC Energy Saving Program - Info Disclosure/Code Injection

Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems. This issue affects HVAC Energy Saving Program:.

CWE-427 Feb 18, 2025

CVE-2024-57963 7.3 HIGH EPSS 0.00

USB-CONVERTERCABLE DRIVER - Info Disclosure/Code Injection

Insecure Loading of Dynamic Link Libraries have been discovered in USB-CONVERTERCABLE DRIVER, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems. This issue affects USB-CONVERTERCABLE DRIVER:.

CWE-427 Feb 18, 2025

CVE-2024-47006 6.7 MEDIUM EPSS 0.00

Intel(R) RealSense D400 Series UWP Driver - Privilege Escalation

Uncontrolled search path for the Intel(R) RealSense D400 Series Universal Windows Platform (UWP) Driver for Windows(R) 10 all versions may allow an authenticated user to potentially enable escalation of privilege via local access.

CWE-427 Feb 12, 2025

CVE-2024-42492 6.7 MEDIUM EPSS 0.00

Intel(R) Server M50FCP <R01.02.0002 - Privilege Escalation

Uncontrolled search path element in some BIOS and System Firmware Update Package for Intel(R) Server M50FCP family before version R01.02.0002 may allow a privileged user to potentially enable escalation of privilege via local access.

CWE-427 Feb 12, 2025

CVE-2024-42405 6.7 MEDIUM EPSS 0.00

Intel(R) Quartus(R) Prime <23.1.1 - Privilege Escalation

Uncontrolled search path for some Intel(R) Quartus(R) Prime Software before version 23.1.1 Patch 1.01std may allow an authenticated user to potentially enable escalation of privilege via local access.

CWE-427 Feb 12, 2025

CVE-2024-39813 6.7 MEDIUM EPSS 0.00

EPCT <1.42.8.0 - Privilege Escalation

Uncontrolled search path for some EPCT software before version 1.42.8.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

CWE-427 Feb 12, 2025

CVE-2024-39372 6.7 MEDIUM EPSS 0.00

Intel(R) XTU <7.14.2.14 - Privilege Escalation

Uncontrolled search path for the Intel(R) XTU software for Windows before version 7.14.2.14 may allow an authenticated user to potentially enable escalation of privilege via local access.

CWE-427 Feb 12, 2025

CVE-2024-39365 6.7 MEDIUM EPSS 0.00

Intel(R) oneAPI DPC++/C++ Compiler <2024.2 - Privilege Escalation

Uncontrolled search path for the FPGA Support Package for the Intel(R) oneAPI DPC++/C++ Compiler software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.

CWE-427 Feb 12, 2025

CVE-2024-39284 6.7 MEDIUM EPSS 0.00

Intel Advisor < 2024.2 - Uncontrolled Search Path

Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.

CWE-427 Feb 12, 2025

CVE-2024-36291 6.7 MEDIUM EPSS 0.00

Intel(R) Chipset Software Installation Utility <10.1.19867.8574 - P...

Uncontrolled search path for some Intel(R) Chipset Software Installation Utility before version 10.1.19867.8574 may allow an authenticated user to potentially enable escalation of privilege via local access.

CWE-427 Feb 12, 2025

CVE-2024-36283 6.7 MEDIUM EPSS 0.00

Intel(R) Thread Director Visualizer <1.0.1 - Privilege Escalation

Uncontrolled search path for the Intel(R) Thread Director Visualizer software before version 1.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

CWE-427 Feb 12, 2025

CVE-2024-36280 6.7 MEDIUM EPSS 0.00

Intel(R) High Level Synthesis Compiler <24.2 - Privilege Escalation

Uncontrolled search path for some Intel(R) High Level Synthesis Compiler software before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access.

CWE-427 Feb 12, 2025

CVE-2024-32938 6.7 MEDIUM EPSS 0.00

Intel(R) MPI Library <2021.13 - Privilege Escalation

Uncontrolled search path for some Intel(R) MPI Library for Windows software before version 2021.13 may allow an authenticated user to potentially enable escalation of privilege via local access.

CWE-427 Feb 12, 2025

CVE-2024-29223 6.7 MEDIUM EPSS 0.00

Intel(R) QuickAssist Technology <2.2.0 - Privilege Escalation

Uncontrolled search path for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

CWE-427 Feb 12, 2025

CVE-2024-24852 6.7 MEDIUM EPSS 0.00

Intel(R) Ethernet Adapter Complete Driver Pack <29.1 - Privilege Es...

Uncontrolled search path in some Intel(R) Ethernet Adapter Complete Driver Pack install before versions 29.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

CWE-427 Feb 12, 2025

CVE-2024-21830 6.7 MEDIUM EPSS 0.00

Intel(R) VPL <2023.4.0 - Privilege Escalation

Uncontrolled search path in some Intel(R) VPL software before version 2023.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

CWE-427 Feb 12, 2025

CVE-2023-31361 7.3 HIGH EPSS 0.00

AMD AIM-T - Privilege Escalation

A DLL hijacking vulnerability in AMD Integrated Management Technology (AIM-T) Manageability Service could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

CWE-427 Feb 11, 2025

CVE-2025-24039 7.3 HIGH EPSS 0.01

Microsoft Visual Studio Code < 1.97.1 - Uncontrolled Search Path

Visual Studio Code Elevation of Privilege Vulnerability

CWE-427 Feb 11, 2025

CVE-2025-21206 7.3 HIGH EPSS 0.02

Microsoft Visual Studio 2017 < 15.9.70 - Uncontrolled Search Path

Visual Studio Installer Elevation of Privilege Vulnerability

CWE-427 Feb 11, 2025